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METHOD AND APPARATUS FOR WATBRMAWONO 
AND AUTHENTIC ATING DATA 

SPECIFICATION 

5 

qRpSS-RF FERE MnR TO RELATED A PPUCATIONS 

This application claims priority to UA Provfaional Application No. 
60/374709 entitled "Syatcm and Method For AuAeiUic Multuncdia Content Within 
An Unified Race-Distortion Mca*ii«nicnt Frflmework " filed on October 3, 2001, 
10 whicli is incoiporated hrnin by reftrence in its eDtirety. 

B A^CflRQUND H V THE INVENTION 
Multimedia data such as digital images, video, and audio tend to be 
susceptible to lanHJering by mimdiarized parties. For eicampte, an imafle of a scene 

15 can be altoed to add obgects which were not actually ptiescnt in the oriffnal image 
and/or to rcraovfi objects which were actually present in the origiiwl image. Not only 
can altered data be used tor fiBudnlcnt or deceptive purposes, but one wishing to deny 
ut misrcpiCSOttt ficts evidaaced by genuine, unaltered data may be able to do so 
convincingly by clandestine, jraudulent manipulations of the genuine data because of 

20 the diificuhy of detecting such manipulations. 

A number of techniques have been used to delect impropca- daU 
manipulation and/or to prevent tcf uHiation of content. For example, Fig. 6A 
ilhistratea a typical prior art wateraiaiking-bascd system in which original content 604 
— c.g., ^ set of image^omdn data — is subjected to a spatial transform 60K to 

25 produce spaiially-transfbrraed data 630. Typically the spatial Uansfonn 608 is a 
discrete cosine transform (OCT) or a wavelet transfonn. Tnfbnnation 606 to be 
embedded in tlift content 604 is also transformed using a spatial transfonn 610 to 
derive spatially-transformed data 632. Similarly to transform 608, trana&nn 610 is 
^ically & DOT or wavelet transfomi. A waiermaA embcddine operation 612 nses a 

30 secret locy cjide 602 to embed data 632 into spatially iransfbimed data 630, thereby 
generating watermarked data 638. Various walennark embedding operations are weU 
known to those skilled in the art. The watennaiked data 638 aie then invcrac 
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bansfbnned (block 614) to darive a watennmked vewion 616 Of the original cootem 
604. Forexaiiiple,iflheorigMc<»iKil604i8»setafifiweB^maindflta.ft^ 
wateimwiEBd content 616 is ^ioally also a set of iimge^main daia. 

To authenticate cament whjch has puiportedly been watennarked using 

3 (he system Ulustralcd in Fig. 6A, the watennark Is extracted and verified using the 
verification system lllustiated in Fig. <!B. In the illustrated vetjficafion system, both 
the content 626 to be authenticated and a watennwtccd version 628 of that content 626 
aie qiatially tnmsfijnned by blocks 618 and 620, respectively, to derive spatially 
transfomed data 634 and 636, respectively. Using fte same secret key code 602 with 

10 which data 628 were purportedly oripnally waiennarked in the procedure iUustrated 
in Fig. 6^ a watemwrk extraction procedure 622 processes the spatially transfbrmcd 
original and watenijaiked data 634 and 636, itspectivdy, to derive extiMttd 
watennaifc data 640. Various watermait ejttraction procediiics 622 are weO known to 
ttiose flWUed in the art and, for that Tcaaon, need not be fiirther described. The 

15 extracted watermaricdrta 640 aift verified(htaofc 624) by comparing aoeh data 10 *e 

embedding Information 606 wWchim embedded in the arigim^ 

watermarking prooedmc iUuslratod in Fig. 6Ai 

Howew, Ae above-described watennaildng and aotheoticetion 
systens can fail to detect eettain types of fraudulent manipulaiion. For aemple. 

20 smali gbjeets can be added or deleted without detection. In addition, the 

watomatking and authentication syatems iUustraiad in Pigfi. 6A and 6B. respectivdy, 
use the same secret key 602 in both the watermarking system and the authenticatiDn 
system. Therelbi^ the secret key 602 nrast be distributed to any party who will be 
Btidienfa'cating data, a requirement that Incaeases die risk Aal Ac seritxy of the key 

25 602 wUl be compnOTised. If the key 602 is obtained by an unaudioilzed party, such a 
party can extract the watermark 640, inqjroperly modify Ac content 626, re-embed 
die watcrmaHt. and then pass off the altered conUnt as being genuine. 

Alternative prior art systans fot deriving a multimedia signature fiom 
content and for authenticating content arc ilhwhuted in Figs. 7A and 7B, respectively. 

30 The illustrated systems uses the well known public key inftastmctuixi (PKI) in whidl 
the party providing the data has a private key 708 and « coiieBponding pubHo key 714. 
Such a private key 708 and its corresponding public key 71 4 togefter are commonly 
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le&tred to as e "PKI key pair." Fig. 7A iflbrtratei a systero Ibr using the private toy 
708 to derive a multimediB signature 710 torn the original content fi04. to Ao 
illvfitnted system, chdmrterirtic featuie data (a/k/A "fcatuiw") 728 aie extracted hy 
block 702 firom the origin^ content <504. Such ifcature data 728 can be, &i wantple* » 

S hrightneaa histogtam or an edge map of the original content 604. The fcaturw 728 ara 
hashed (Wock 704) to deri-** a digest 720. The digest 720 is "sigped" or enoypted by 
block 706 using the private key 708 to derive the multimedia signature 710. 

Content puiportedly signed by the Byston illustrated in Fig. 7A ia 
verified using the sywero illustrated in Fig. 7B. In the illustrated verification system, 

10 features 730 are extracted by block 702 from the content 7 1 2 which is being verified. 
The featiiies 730 an: hashed by block 704 to derive a digest 722. A signature 71 8 — 
which is pmportedly Identical to the signature 710 derived in the signing system 
Ulustratcd in Fig. 7A — is decrypted by block 724 using the public key 714 to derive 
decrypted data 726. If the content 712 and signature 718 are genninB, the decrypted 

15 data 726 should tna!<* the digest 722 derived fram the fcfliures 730 ©ttraoW 

conind 712. The digest 722 and tte decrypted daw 726 are therefore compared by 

block 716 to derive a verificatina result 732 which indicates successful or 

nnauccessfiil v^fiestion. 

Ho>ravw. like the syttetns illiicinted in Figs. 6A and fiB. flie signature 

20 extraction and verification syRhsma Uhistrated in Fip. 7A and 7B, respectively, can 
abo fail to detect eertain types of ffaudulent mampuWlon. For sample, it is 
relstrvely easy fcr an unaudiorized person to fimidulenriy add or ddele ohjccb in an 
ini8|^ without changinB featurBS ,«!nch as the histogram or edge map of the image. 
The systems ilhiatrated in Figs. 7A and 7B would therefore be unable to detect such 

25 frMdulem manipulation bccawsc the systems relyupon extraction of such features. In 
addition, the systems illustrated in Figs. 7Aand7B have the disadvantage of requiring 
a substantial amount of additional Etorage space £w the signature 710 and 718. 

Addirional prior art systems for walermaridng and for auflienticBting 
data are illustrated in Figs. 8A and 8B, respectively. Fig. 8A illustrates a 

30 watermarking system in **ich features 806 — e.g., histogram or edge map data — 
are extracted by btook 804 firom the oripnal content 802, The Matures 806 are 
optionally randomized by block 808 to derive randomized featnra data 810 wW* are 
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used fts ft seed input 814 of a oonvcntional quaxi-random code generalor 812. Such 
qu^-random cndc eeoeratots are well-known in the art and, thcrftfcire, need not be 
flirihor described. The quasi-random code generator 812 ilhietrated in Fig. 8A ascs 
the randomized feature data 810 and a secret key 816 to gcnctftte watermark data 818. 
3 An embedding operation carried out by bJock 820 uses the secret key R16 to embed 
the watennaric data 818 into the original content 802, thereby deriving wateimarkert 
content 822» 

Rcfcrring to Fig. SB, content 824 purportedly derived by the system 
illustrated in Fig. 8A is aulhEirticatcd by tHe ayatem illustrated in Fig. 8B, In the 

10 illuRtratcd authentication system, watemiark data 828 extracted by block 826 fiom 
the watennaifced «*ntent 824 using the same secret key 8 16 as was used in *c 
watermaridng system illustrated in Fig. 8 A. If a randomization step 808 was used in 
the original watcrinaricing procedure, the wateraiark data 828 is 
decodedAmrandomizEd by block 830 in the authenticalion system to derive 

15 unrandomized data 832. An inverse watBtmaric generator 834 uses the secret key 816 
to refcover a seed 836 conreqMmdiog to the unrandomized data 832. In other words, 
the inveree waiermark gcnenrtor 834 treats the unrandomized data 832 as a 
watxsrmeric and detennines the seed 836 which would have been uacd to generate the 
watermark 832. Featuioa 844 are extracted by btock 838 Itam the walermaikcd 

20 content 824 and compared to the recovered seed data 836 usinfi a conelation 

piOGcdure carried out by btock 840. The correlation procedure carried out by block 
840 produces an authentication result 842 having a value which can range fmm zciti 
to one. Tlie result 842 indicates how muc* confidence ahould be placed hi the 
authenticity of the watexmadced content 824; a value of one indicates perfect 

25 confidence, and a value of Tem indicates no confidence. 

However, the watennarkmg and authentication systems ilhistrated in 
Figs. 8A and 8B arc incompatible with PKI» and iherefiJTB require the same secret key 
816 to be used in both the watcnnariclng system and the authentication system. The 
secret key 816 must be distributed to any party who will be authenticating data, and 

30 this rcquiremttit increases the risk that the secrecy of the key 816 will be 
compromised. 
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CTIMMAI^V OF T HE IKVEOTIQN 

It is thcitfbic an object of the present invention to provide a date 
wat^uldng and aiithraiti w«on systems which detect tottctulant roanipulatioos of 
data, while petmitling acceptable types of datA manipulation. 
5 It is a further object of the piesent invention to providB a data 

waternivldng and anflientication systems which do not require a substaniial arooum 
of additional data etoiagei 

n ii yet anodicr object of the present invention to provide dam 
watemiarking and aulheniication systems which arc compatible with FKI. 
10 It ia a still fUrtber object of die present invention to provide data 

watemiarkine and authentication systems which enable a user to select, with a 
subetantJal amount of precirion, a level of authentication strengjh {i.e,, reliability in 
detecting fiaudulcnt manipulations) with wtiich data wiU be watcnnarked and 
authenticated. 

15 These and other objects are accomplishod by the following aspects of 

the present invention. 

In a watemiarldni proccdnre in accordance with the present invention, 
one or more feature codes are derived ftom a first set of data that is to be 
watennarked. One or more parity checks bit$ are derived ftom the fcahme codes and 

20 are included in one or more codewords. The codewords a» processed by a bash 

operation toderiveahaahreault. A key code is used to sign the hash result to derive a 
signature. Tlwsignaluieisuacdtowateimaikthefirstsatof da» 
the signamre in the first set of data or data derived therefiom, Of by storing the 
signature in the header of the f$»t set of data or data derived therefrom. 

25 In aocoTdancc \rith an additional aspect of the present mvendon, a Wt 

plane fractionaliaed data set can be authenticated by deriving fcrtnrc codes from 
nspecti ve bit plane aubblocks of the data set and then comparing die ftaturc codes (o 
coiresponding message codes derived jBrom watenuaric codes that have been extracted 
fiom the aforementioned bit plane subbk)cks. The bit plane subblocka used to derive 

30 the feature code3 arc defined by lespective truncatioin points. The data sftt has a first 
data set siie and die bit plane subhlocks have a sacond data set size. The ratio of the 
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ant and second data set sizes 5« computed and used to indicate an authenticatim 
straigtb associated widi die audsendcatim result, 

BRTKF DESCRIPTION O F T HE DRAWIN GS 
5 Ftarflicr objects, fcatojcs, and advantages of the present invention will 

become apparent fwm the fonowing detailed description taken in conjunctian with 
the Bccompaajtog figures showing iUustnitivc cmhodiincnta of the invention, in 
which: 

Pig. I is a functional block diagram illustrating an exetr^lary system 
10 and procedure for traaaftwming and encoding data in accordance wiUi the pies*u 
inventianj 

Fig. 2 A is a fiinctional MoA diagram illustrating an exemplary system 
and procedure for watermarking data in accordance with the present invention; 

Fig, 2B is a functional block diagram illustraiing an addidanal 
15 exOTiplaiy system and procedure for watfimarfdng data in accordance with the 

pneacnt invention; 

Fig. 3 is a fimctional block diagram illustrating an exemplary system 
and procedure for anihemicailng data in accorfanca with the present inventlw; 

Fig. 4 is a diagram illustrating an exemplary pattern for sequencing 
20 data in accardance with th^fi present inventions 

Fig. S is a flinctional block diagram ilhistiatmg an exemplary system 
and pmcodure for decoding and transforming data in accordance with the present 
invention; 

Fi& 6 A is a fimctional btock diagram ilbstrating an exemplary prior 
2S art system and procedure for watennaridqg data; 

Fig. 6B Is a fimctional hkwc* diagram illuatrtGng an exemplary prior 
art system and procedure for veri^g d^; 

Fig. 7A IS a functional block diagram illustrating an exemplary prinr 
art system and procedure ibr signing data; 
30 Fig. 7B is functional block diagram illustrating an cxenqslary prior art 

system stud pmceduic &r veiling data* 
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Fig. 8A w a fiaictiona] block diagram illunrating «n Ktemplaiy p"or 
art system piocadure for watcnnaiking <lata; 

Fie. SB is a fimctional bloclc diagram illustrating an exemplaiy prior 
art system and prnccdure Cbr authenticating data; 
5 Kg. 9 is a diagFan illustrating an cxcai^lary computer syBtom for 

implementing the systemfi and perfonning the procedures illustrated in Figs, 1-5. 6A» 
6B, 7A, 7B, 8A, 8B, U. 13, 15, and 16; 

Fig. 10 i& a block diagram illustratii^ an exemplary prooesaing section 
far use in the oomputer system iUufitrated in 71 g. 9; 
10 Fig. 11 is a diagram illustrating the processing of data by an exemplaiy 

bit plane foctionalizfttion procedure In accordance with the present invention; 

Fig. 12A is a diagram iltastzating bit plane fractionalizod data in 
accordance with the present invention; 

Fig. 12B is a diagram illustrating exemplary wavelet coeffioiCTta 
15 divided into suhhands and codeWocks in accordance with the present invention; 

Fig, 12C la a diagram illustrating an exemplary codeblocfc of bil plane 
fractionalized data divided into bit plane fhctionalized snbWocka in acewdance with 
the present invention; 

Fig. 13 is a flmctional bkick diagram illustrating an ex«nplary system 
20 and pioceduie for watennaridng data in accordance with the present mvcntion; 

Fig, 14 is a graph illustrating an exemplary relationship between 
distortion and authentication bit rate fbr a watennarlring system and procedure and an 
authraiticalion system and procedure in acconlance with the present invention] 

Fig. 15 is a table iJliifttrating an exemplary scheme fbr encoding data in 
25 accordance with the present invention; and 

Fig, 16 is a functional block diagram illusnating a system and 
procedure for deriving a feature code in accordance with the present invention. 

Thruugbout the figures, unless otherwise stated^ the aame reference 
numerals and ohaTActcrs aic uaed to denote like features, elementa, componoits, or 
30 portions of the illustrated embodimenti;. 
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nPTAn KT ? DFJSnMPnON OF THE IN VENTIQM 

ExemplAiy wBtemuffkiag and authentication systems in accondanec 
with the present invention empjay two stages of leatennaiking. In the tot stage of 
wateimatldng, a set of quasi-random watcnnHrira is generated based upon feature 

5 codes derived fiom various wlweta of the data being watermaikcd. The term "feature 
code" is used herein to refer to a set of data thai provides infbimation regarding one or 
more pMtions of an Image. For example, a feature code can he a data set representing 
an edge map of an image, a data set representrng a brightnesa histogram of an image, 
or a sequence of bits Ihmi a lectar^lar region of a single bit plane of encoded, 

10 tamsfbrm-domain image data, tothewatermarldngandauthaihcartonpro^ 

the prcsCTit invention, each feature code is preferably an ordered sequence of bits fiom 
a square region of a single bit plane of a J^et of bit plane fraotionaltzed wavelet 
tranafcim coefiBciente, as is discussed in further detail betow. 

Each watcrmaik is embedded eithsr in the data subset flrom which the 

1 5 watennark was derived c« in a diftferat data subjset During autheaitication of the 
data, the embedded, quasi-random wateimarks are used fbr detEnnining wWdi subsets 
of the watermarked data, if any, have been improperly manipulated. 

In the secoxxl stage of watennaildng, an encrypted watemoaric is 
derived from the set of feature codes as a whole, rather than on a subset-by^subsd 

20 basis. Hie encryption is pcrftmncd using a jwivate key which is kept secret. During 
Buth^tication of the data, the second stage watermarlr is used for detcnniniag 
whether nr nnt ftaudulmt manipulations have been permed upon any of the 
watetmarlced data, but typically is not used J«t id^tifying which apecifio portion(s) or 
5ubaet(a) of fte data has/have been manipulated* 

25 Data to be mtomarked in accordance with the prescm iflvention is 

first processed by the spatial transformatiGn and encoding system and procedure 
illustrated in Fig. 1. The block diagram iUusirates the processing of image rUta, bnt 
the watennaifcing and mithontication methods of the present invention can be a«>lied 
to a variety of difftrent types of data inchiding, hut not limited to, image data, video 

30 date, audio data, and/or other multimedia data. The proceduie illustrated in Fig. 1 
starts wifb image-domain data 102 which are subjected to a spatial domain transfomi 
by block 104 — in this example, a wavelet transfcnn — to derive transform-domain 
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date 106 — inthii example, wovelet twusfonn coettdeias. The transfonn^inaln 
data 106 «e qwnitized (block 108) to derive qiumtised mnsfoini-doniaiii data 1 10 — 
e.g.. qn«,ti«d w«vdet tmufom coefEcienls. la oider tolncrcaK theniunbw of 
quantization leveU with which the content is represented, the quantized transfbtm- 

5 domain drta 1 1 0 aie pxeftiably encoded by a bit plane 6»ctionfltoation procedure 
1 12. Ab is discoxMsd in fuither detail below, quantized tranfifbim-rtomain daU having 
Q larger number of quantization levels is advwitageoue because it provides the ukx 
with increased flcability — i.6., a gMater number of choices — in selecting the 
atreogthofaulhtiilicatiortobcused. In the procedure illustrated in Fig. l.lhebit 

10 plene ftBctionalization prucednre 112 » awcU known encoding procedure commonly 
rcfetred to aa Embedded Block Coding with Optimized ^nmcalion (EBCOT). 
BBCOT is, in fact, the compression engine uaed in (he well known IPEG2000 image 
encoding standard, which is described in Infiirmation TechnoU>gy-^PEG2000 Image 
C«fii!j5yW ISOflDECIiitoriiBtiojMlStaiKlaid 15444-1 (D^^ 

15 andpix.ceduiellluarattdinFiB.l.«hcEBC()Tenwdingbyblo{*112piodn« 

ofEBCOTcodeallS. 

As will be leadily underttood by those sldlled in flic art, EBCOT codes 
provide for convenient conqMressicm ofmultimedia oonteni suCh as image, video, 
and/or audio data far transmission and storage. Data which are ctose to the original 

20 data can be tBcnvCTrf from the EBCOT eodes using the system and piocediire 
ilhwtitf ed In Fig. 5. lUrfJming to Kg. 5, RBCOT codes 502 — which, in this ca^ 
wot ciTiginally derived from an imi^e — are decoded wing a conventional, inverse 
BBCOT (i.e., EBCOT decoding) procedure carried out by block 504 to derive a set of 
quantized wavelet transfbrm coefficients 506. The quantized wavelet transform 

25 coefficients 506 can be processed using an inverse wavelet tranafprm perfonned by 
block SOS to recover image-domain data which ie close to the original image.donwin 
data 510. 

The benefits of the EBCOT encoding performed by Wock i 12 inFig, 1 
can be further understood with reference to Fig. 1 1 . For each translbim-domaln 
30 datum (e.g., wavelet coefllcicnt 1 106, iUustntted in Fig. 1 1 as represented by thrw 
bits), EBCOT encoding derives a eode 1110 whose value depend* upon the value of 
that particular datun 1 106 and fte values of the aurroundmg data 1 108 C'Uustrated m 
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Fi£. n as leprtsenied by thro bits each). The dsrivailon of a bit plane firactitraalized 
daliim 1 no ftom a wavrtet coefficient 1106 mul to neighbora 1108 U well Tauxw in 
theait,andi«,hfi»ct,!»artofthe afi>rem«Btionei JPEG2000 encoding standard. Tm 
derived code 1 110 is npnsatfsA by mon bits (12 bits in the example illustrated in 

5 Fig. 11) than any one of the wavelet coeffldenti 110(5 and 11 08 used to derive the 
coda 1110. As a result, a block 1 1 12 of wavelet coefficients having a particular 
number of bit planes 1102 (3 bit planes in the example illuatrated in Fig. ! 1) is 
converted into a block 1 114 of data having a laiger number of bit phmea 1104 (12 bit 
planes in the example illustrated in Rg. 1 1). Ibe availability of a birgcr flimO>ef of bit 

10 planes ia beneficial Ibr data compression and aithcntication. because it allows more 
closely sp«ccd choices of how mtich compression ia to be u-sed in encoding a data set 
(in the case of data campTBssdon) and/or how much data is to be used fijx 
watermaildnK and authentication. 

Pot example, consider the rate^stertion (R-D) fimction ilJnstiated in 

15 Fig. 14. In image and/or audio compression fOThcations, such fimctions are 

cornmonly used to repieeeat the amount of «Bstortion D as a fimction of "Wt taie" — 
i.8., the ratio of the anwunt of data retained in the compressed data aet to a»e amount 
ofdatahitbeoriginai^uncanipnsseddataset IfthBcomprasalooispertomedby 
tnincating the data set at particular Wt planes of the BBCOT coded data, then the 

20 number ofcholoBS 1402 ofbit rate -and the cwiesponding number of possible 
values of diatoition D— is relatively limited. However, if the bit planes are 
fiactionalizn). additional choices of tmncatlon points, and therefore, additional bit 
rate choices 1404. become avai Ublo. This advantage appHes to authentication as well 
as compression. For example, consider a watemvirldng system end an authentication 

23 eystero in which the strength of the authentication is detennined by the authenlication 
bit rate — i.e., the percentage nf bit planes (after truncation) used to derive feannra 
for the watermarking procedure — and in which the amount of distortion D permitted 
by tiie authentication procedure is a function of the authentication bit mtc. Data 
having a small number of bit planes pnwidca a small number of choices 1402 of 

30 authentication bit rate and corresponding distortion D. However, if theWtplanee are 
ftacuonali7«d. additional choices 1404 are availsble. 
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Fig. 12B illustrates an example of bd snrax of wavelet tTwform 
cocfficicitts derived from ait inmge to be watBrmorkOd in accordflocc with the present 
invention. Such wavelet data may be divided into subbaDd5 — e.g., HHl j HLl, LHl) 
HH2. HL2, LH2, HH3, HL3, LH3, and LL3 — r^tfesentins vaiiaia spatial frequency 
5 components of the itnagc. h accordance with the present invention, the higher 
frequency subbands HHl, HLl , and LHl are preferably c^h divided into four or 
more codcblocks. For example, in ttie wavdet coefBcieni set illustrated in Fig. 12B, 
Bubband HHl is divided into four codcblooks HHl i, HHh. HHls and HHU; subband 
HLl i$ divided into fbur codeblocks HLl i, HLlj. HLI3, and HLI4; and aubhand LHl 

10 is divided into four oodeWocks LHli, LHI2, IRh, and LHI4- It fcr example, each 
of the subhands HHl, HLU and LHl is a square amy of 256 x 256 coeflBciente, and 
is divided into ajuare oodeblocka of 64 a 64 coeflScients, dun each of the auhbands 
HHl, HLl, and LHl wiU consist of four codeblooks if the codeblocks do not overlap. 
However, if each of die subbands is a squum that is larger than 2S6 x 256 coefficients, 

IS and 19 divided into equve codeblocks of 64 x 64 coefficients, then each of subbands 
HHl, HLl, and LHl will iiKludc motc flian four codeblocka. 

la any case^ each codeblock is enr^ed using the EBCOT coding, to 
derive a corresponding EBCOT encoded codeblock of bit plane ftacdonalb^d data. 
For example, cndehlocks HHI1, HHh. HHh. HHU.HLli, HLI2, HLI3, HLU.LHl,. 

20 LHh, LHlj, and UIU are EBCOT eicoded to derive the bit plane fractionalized 
wbblocks 1202 illustrated in Fig. 12A, Each bit plane fiactionalized codeblock 1202 
is preferably a 64 x 64 square array of 4096 encoded data words. Similarly, subbands 
HH2, HL2, LH2, HH3, HL3, LH3, and LL3 can also be encoded to derive 
cdXTcspdnding encoded codeblocks 1204 illustrated in F>g. I2A. 

25 As is illustrated in fig. 12C, each bit plane fractioimlited codebbck 

1202 or 1204 is preferably divided into 16 bit plane fractionalized subblocVs J 206, 
each subblocic 1 206 being a 16 x 16 square amy of 256 encoded data words 1208. 
Each encoded dau word 1208 is bit plane fractionalized and therefore bas a largo* 
number of bits than any one of the wavelet transfbrm coeCScients from which h was 

30 derived. 

In accordance with the present invcmttnn, wavelet transfbnn 
coefficients can be watermarked using die system and procedure Ulustraied in Fig. 
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2A. In lheinu8tt«edBy«ein and poccdure,EBCOTcodM 118 «re derived 
of qiianti^ wavelet transfinm coeflkdenls 1 10 (blork H2X w » <toniS6«l above 
with reference to Fie*. L ^ 12B. end 12C. Selected bit planes of selected 
sabMooks offlie EBCOT codes 118 sub used to derive fisature codes 204 by block 

5 202. Fur examplo. bit pl«ae subbtock BPSB, is used to derive feature code F„ bit 
jdBOO «ubblockBP9B2i« uwd lo derive feature code Fb etc The derivation of a 
featiDO code can be flirther understood with reference to Fig. 4 which illustrates an 
Bxemplaiy 16 x 16 aubblook 402 of *e bits 404 in a single bit plane of a set of 
BBCOr codes. The illustrated bita 404 are numbered 1-256 and airaigcd in a Icft-to- 

10 right. low-by-iow order. A feature code can be derived by foiming a sequence of 
some or all of the bits 404 in the illttstrated onler or In any niher convenient order. 
Alteiiiatively, a ftatniB rode can be fbnncd by a system and procedure 202 ludi «» i<« 
illnstrated in Fig. 16. In the illustrated system and procedure, a set 1602 of the first 
239 bits of a bj t plenc subblook 402 (shown in Fig. 4) is ftnned. A Rct 1604 of the 

15 remaiiriag 17 bits lscomWnedwifli»sBtl606of222bit8bypBddiiigths 174>itdaia 
set 1604 on the right with the 222J)it data set 1606 to form « 239-bit data eet 1610 
(carried out in block 1608). The bit siring 1602 of the fta 239 bits of the hit plane 
subbtock 402 and the naudy fbnncd Kt string 1610 — vduch also has 239 bits — axe 
processed by an Excluaive OR fimctiott by block 1612 tn finm a 239-bit feature code 

20 1306. 

Turning back to Fig. 2A, typicslly not all of *e available bit planes are 
used for deriving the feaWra codes Z04. Rather, the percfsntaec of bits to boused for 
deriving ftatuie codes is equal to an autficotication bit rate 242 which can be selected 
bydie user. For example, rafeiring to Figs- 12A-12C. consider a case in which the 

25 sdected bit rate 242 ia 0.5 (i.e,. 50%), and the feature codes are to be extracted from 
the bit plane fractionslized EBCOT codcblocks 1202 and 1204 derived respectively 
from (a) all of the wavelet transform code*locks HHI i. HHli, HHlj, HHI4, HLli, 
HLI2, HLI3. HLU. LHl,, LHl J, LHb, andLHl*, and (b) all of subbands HH2, HL2, 
LH2, HH3, HL3, LH3, and LL3. Thr. fisature codes 204 are derived only ftom 50% of 

30 the bits of the entire set of EBCOT codeblocks 1202 and 1204. Eadi extracted feature 
code is derived — preferably using the procedure described above vrith to Fig. 
1 6 i^om an ordered sequence of bite ftnrn a partieular bit plane of a particular 
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subblock 1206 of « pjirticular EBCOT-encoded codeblock 1202 or 1204. but not 
ev«y bit plane of the 6i*block 120(J « used to eenenta a feature code. PrefwabFy, 
Ac fcatare code derivation procedure 202 uses only the most significant bit planes of 
eech Bubblocic 1206. np to a tmncation point 1210 wWeh can differ among the 
differeiit aubblooke 1206. The mmcation point 1210 for each subblock 1206 is ihe 
same M Ihe analogoua tnmcation point u«ed for 50% data compression in the well 
toOTWi EBCOT comprwRion algorithin of the JFEG2000 standari. As an additional 
example, if the selected bit rate is 0.12S (i e., 12.5%). ttic feature codes 204 are 
derived only ftom 12.5% ofthe bits of *e entire set of EBCOT codcblocks 1202 and 
1204. The bit planes useai to generate feature codes are detenniaed by the respective 
truncation points of the subblodcs in the same jnaimer thai the JPBG2000 
coxnpressinn algorithm selects truncation potatsfer a 12.5% bit late. Thederivation 

of optimal truncation pofaita fiw tespcctivc subblocks baaed oa » given bit rate is wbH 
hKW to Aose flidlled in the art, as is evidifflced by the ISO 
15 JPEG2000(irf.). bi the watHmaricing system and procedure aiustnrted in Fig. 2A, file 
selected bit rate 242 can be used as an iiuUeatnr ofthe maximum possible 
antfaenticatiim sii«ngtii with which one can later amhcnticatB the wateroiaiked data 
produced by tiie wateimarlong syalem and piocedure. 

In tiw watemiaAtag system and proccdme illMtrated ta Fig. 2A, the 

20 ftatme cndes 204 preferably are not used directly to Sinn watomaiks, but are firrt 
encoded using an enor anrotiwv coding (EOQ procedure peifbrmed by encoder 

block 206 which derives parity check bits (FCBb) 208 based on the feature codes 204. 
For example, feature code Pi is used to derive a group PCBi of parity check bits, 
feature bode F2 is used to derive another group PCB2 of parity check bits, etc. The 
25 xise «f PCBs enhances the stabiUty ofthe watennarWng and autiientication procedures 
by enablmg correction of eiroi9 which may be caused by certain legitimate 
transfoimatiOM such as requairti/irion. wavelet transfcim fifttarion, color filttatton 
iuid/nr iransfomiation, etc. Fig. 15 Ulustrates a look-up table (LUT) 1502 for «n 
exemplary Hamming (7. 4) coding scheme suitable for deriving 3-hit setx nf PCBs 
ftom 4-bit input codes received by an encoder. The input codes received by such an 
encoder, regardless of their source, are commonly refcmal to as "message codes." In 
(he case ofthe watennaiking systsm and procedure iilnstiated in Fig. ?A the message 



30 
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codes rcrrived by encoder block 206 ate the respective feature codas 204 derived 
from EBCOT codee 1 18. Referring again to Fig. 15, any 4-Wt message mde (eg., a 
4-bil feature code) being processed aecording to the illustrated LUT 1S02 will match 
oneof die message codes 1504 listed in the table 1 502. A particular set of PCBs 1506 
5 is associated with each message code 1 504, message code 1 504 and its 

associated PCBs 15Q6 can be concatenated to form a codeword 1508, as is diacuased 
below with respect to the dcrivatian of second stage watciraaiks. It to he noted 
that, although tfie LUT 1 502 illustrated in Fig. 15 is configured to encode 4-bit 
messages^ thm \% no particuUr limit to the length of mesaagea which can be ECC 

10 encoded. For example, an LUT 1502 based on the wdl known BCH (253^39^) 
encoding soberoe can be ueed to ptoce6823:^bitmes6aee codes. Such encoding 
schemes ciTc well blown in the art^ as is evidenced by W. Wesley Peterson and E.J. 
Weidon, Jr., Error-Correcting Codei (2d. ed. 1981> 

Referring again to Fig. 2A, the set of FCBa derived fiom each fieature 

13 code is used as a seed input 210 of a quasi^^ndom code genention block 212 which 
generates a wsctermaifc code ttom each set of PCBs. For example, PCB ^nup PCBi is 
used to d«five watermark Wi: PCB group PCBj is used to derive watermark Wj; etc. 
The qua&l-candom watennarfc generation carried out hy block 212 can be any 
conventiQnal quasi-random code generation procedure. The quasi-random code 

20 generation piricedure 212 can, for cxan^Ie, be an additional stage of ECC encoding. 
If each of the feature codes 204 is 239 bits in length, and the first ECC procednrc 206 
uses the wdl known BCH (255, 239, 2) eroding scheme {^ee id.), then each of the 
resulting sets of PCBs 208 will be 1 6 bits m Iftngth. If ao, and if the quasi-random 
code generation procedure 212 uses the well known BCH (31, 16, 3) encoding 

25 scheme Uce id,), then each of the reaulting watermarks 214 will be a Sl-bit codeword 
comprising a 1 6*bit message code (i.e., the 16 PCBs received from the first ECC 
procedure 206) plus 15 PCBs derived by the watermailc generation procedure 
according to the BCH (3 1 , 1 6, 3) acheme. 

In any case, regardless of how thn watermarks 214 are derived, they 

30 ore received by a watermark input 21 8 of a first suge watermark embedding block 
216 which embeda each of the wateimarke 214 into aelected bit poaltlona of a 
selected, nnivfwlinnaliT^ bit plane of a selected aebblock of the quantized wavelet 
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mjiaiam cacffideiils UO (shown inE& I), thereby deriving a set of first stage 
wateimaiked wavelet transftm cncffldcnt hits 244. The selasted, non-fhcdonaUzfid 
sttbblock into which fbe wetomailc is to be embedded cm, npticmally, be cither (a) the 
non-fi«ctlonalizBd subblock coirwpondine to the ftiictioiiaHzed subblock ftom which 

5 the wfllermark was derived, or (b) a different non-frftctionalized subblock. The first 
stage watcimark embedding block 216 also provides non-watEimarted wavelet 
transfbrA coefficient hits 220, 

With ttw selected subblock of quantized wavelet transform 
cocffidents, the non-fhkCtionalized bit plane Imo which the wdtermaric is to be 

10 embedded is selected as fbllnws. As is discussed above, for a jjiven bit raie» the 

compression algorithm of the JPEG200O standanl assigns a particular tnmcation point 
to each subblock of data. For the bit plane in which the watermark will be embedded, 
the first stage wateraiark cmbeddine by block 216 iHustrHted in Fig. 2A preferably 
sdccta the closaat non-firactkmalizcd bit plane that is more significant than the 

15 JPE©000trnncatiDnpointoorTespondingtothe«fllectedbitraie2 Ifthc 

truncation point exactly coincides with a particular non-fractionalized bit plane, ften 
the watcnnaric is embedded in eilto that bit plane or the next moic sigmfioant bit 
plane. 

Withm the selected bit plana of the sdected snbblock, the respective 
20 hits of the watcimaric are embedded by replacing existing bits of the selected bit plane 
in a random or quasi-random pattern based on any suitable random or quasi-random 
code. The wavelet transfbrm coeffldent bits 220 thai are not selected for first stage 
watomariring are used fcr second stage watennarking» as is discussed in fiirthcr detail 
below. 

25 The wfttermark embedding procedure 2 16 can bo fiirther understood 

with rcfcrtmcc to Fig. 1 3. As is ilhistrated in this block diagram, a message 1 306 is 
derived ftom the bits of a particular bit plane subblock 1312 of EBCOT eodes 
corresponding to a edngle subblock of a wavelet transfami coeffiricnt eodeblook by 
block 1302. A$ i* discussed above with respect to Figs. A and 16, the message 1306 

30 pan be formed by airanging selected bits of the bit plane subblock 1312 ro any 
convcsnient order, or by deriving the messagp 1306 accoiding to the procedure 
iUustratcd in Fig, J 6. In cither case, the message 1306 is processed by an ECC 
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fimedon (block 206 in Fig. 2A) — based an, for example an LUT 1 502 such as is 
illustrated in Fig. 15 — to derive fhe PCBs (130S in Fig. 13) eorresponding to che 
message 1306. For example^ if 16 x 16 subblocks are used, and BCH (2SS, 239^ 2) 
encoding is applied to a239«bil mess^e 1306 derived from a subblock 1312 of a 
5 ftaetionalized bit plane using tbe procedure illuetratod in Fig. 16, 16 PCBs are derived 
from the message 1306. Sirnibrly, if BCH (3U 16, 3) encoding is applied to a 16-bit 
meaaage 1306, 15 PCBs are derived from the message 1306. 

As is discussed above» each set of PCBs is received by a seed 
input 210 in the quasi-random watennaik generation block 212 illustmtod in Fig. 2A. 

10 In the exemplary procedure iQuetrated in Tig. 13, tbe watermark derived from each set 
of PCBs is embedded by block 1310 into a non-fracUonalized wavelet transfer 
coefBciem subblock 1320 that cacresponds to — Lc., has been frataan^vci to derive 
^ B fiactionelized bit plane subblook 1314 other than the fractionalized bit plane 
subblock 1312 from which the PCBs 1308 were derived As is discussed ebove with 

IS mpect to fhe embedding block 216 illustrated in Pig. 2A, the emb^^ 
, 1310 can. for example, be performed by roplacing some or all of the bits of subblock 
1320 with dm bits of the derived watermaifc. Aimilariy, in the illustnted ecKample, the 
PCBs derived from subblock 1316 are embedded nitn a diff^t non-fractinnalizal 
subblock 1322 which cont^ponda, eg., to fractionalized subblock 1318 — i.e^ 

20 subblock 131$ has been derived by fracdonalizAtion of subblock 1322. As ia 
discussed above, fhe bit plane from which each watermark is derived is preftrabty 
immediately above (Le., irinrc rignificant than) the JPEG2000 truncation point for the 
subblock from which the watennaik i% derived, whereas Ac bit phmc m whirii the 
watermark is embedded i$ prefciBbly at the JPEG2000 truncation point fbr the 

25 subblock in which the watcnnmic is embedded. 

Furthennore, although Fig. 13 ilhistratcs the enihcrifling of a 
watcimark into a non-fiactionalized subblock wi used to derive tbe fractionalized 
subblock from which the watermark was derived, a watemark can also be embedded 
into the non-fiactionalized subblock used to derive the fractionalized subbkxdc from 

30 which the watermark was derived — in this CBse« the watermark is preteably 

embedded in a bit plane which ifi Tnorr sigmficant than the bit plane from which tbe 
watermark was derived. As is discussed above wifii respect to Kgs. 12A and 127), the 
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number of Wt planes Ihm vrtiich fettittM are wwcted M 
sudiaiticatioo bit rate 242 (shown in Fig. 2). 

Refeirios again to Ae pmoBdnw illiwtiated in Fig. 2A, in addition to 
the flist stage of waieimarking — in whidi the first stage watennaiked wavelet 

5 tiansfonn coeffident bits 244 aiedenvcd— a 8ec<md stage of watermark^ 
perfbimed. Li tbe second stage portion of the waieimarlcing procedure, each of the 
future codes 204 concatenated with its conrsepoading PCBs (which arc within the 
set of PCBs 208 deriwd by die ECC encoding in block 206) to derive a codeword by 
block 222. For example, feature code F| Is concatenated with PCB group PCBi to 

1 0 fenn codewoid Fi + PCB, ; fcatuit code Fi is concatenated with PCB group ?CBs lo 
form oodewoid Ft + FCBj; etc. TUe entire set of codewords 224 is hashed by block 
226 to derive a digest 228. For the haahing procedure carried out by btock 22^ tho 
codewords 224 can be vrangod m any convenient order, provided that die same order 
n later used in fl» hash pfocedurepoflmned by blnck 322 of flic auflientication 

15 procedure— discussed below with referance to Fig. 3. In addition, the saunc hash 
Blgoriflm should be used in both the watemuzking and auflwntlcaiion procedures. 
Exsmplcs of suitable hash algpiiflnnB Inchide the "MD5" algorithm (which produces a 
128-bit digest) and the "i?HA-l" algorithm (which produces a IfiO-hit digest). Such 
hash algorithms are well known to thnse skiUed in the ait, as ia evidenced by Biuce 

20 SdvvADt,AppliedOyptogroi^{t996). 

Retiuning mw to the watermarking procedure illusnated in Fig. 2A, 
regardless of which type of hash algorithra is iwcd in flic hashing procedure 
perfbimed by block 226. tbe digest 228 is "signed" by block 230 using a private key 
232 which Is preferably kejit secret from all other parties, including ihc eventual 

25 recipients of fliB watennaiked data. Anexamplcofa suitable signing procedure is the 
Elliptical Curve Coding procedwe, which is well known to those skilled in the art as 
is evidenced by WUliam Stallings, Cryptopaphy mi Network Seofrity. Prtndplis 
(Old Practice (2d. ed, 1995). The result of the signing by block 230 U a global 
signature 234, which is ECC-enooded by block 246 to derive an ECC-ennodcd 

30 watermarit 248, The ECC-enooded waiennaik 248 is typically 320 bitt kmg. A 
second stage wntennaris embedcMng Mod: 238 recdves the watonmark 248 through a 
watermark input 2^6 and embeds the walsmiark 2<W tothe non-waterniaikcd wavelet 
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tranafotw ooeiEeioit bits 220 to derive second Uage watennaiked wavelet transfenn 
coefiRcient bits 240. The ECC-eneoded watemiark 248 is embedded In die non^ 
watermailced wavelet tiansfbrm coefBdoit bit$ 220 ha^^cd on a random pattern, 
typically m fhc same bit plane as that used to embed the flnt sttigc watermaiks 2 14 in 
5 the first stage waicmiflikcrl wavelet tranjfbnn coeffi^ent bits 244, The embedding 
procedure 238 ambedB the second stage watermark 248 intn the non-watcnnarkcd 
wavelet tranafbrai coefficient bits 220 by replacing selected biis of the non- 
watermarked wavelet coefficient bits 220 with respective bits of the ECC-encoded 
watermark 248. 

10 It is well-known to those skilled in the art that alteration of certain 

wavelet transfbnn ooefliciaite tend tn gcneratte undcairablci easily visible artifaota. 
These particular coefficients are preferably "protected" fiom alteradon aocoidxng to 
human vision system (HVS) njodding tBchniquee, and are conaiderod "ofMimltB" to 
the walarmark embedding by blodt 23g. HVS modeling techniques are well known 

\5 to those skilled m the art. as is evidenced by Anil K. Jain, Fundamentab of Digital 
Imags Froeessiiig (1989). The second stage watermaiked embedding by block 238 
preferably does not embed any bits of the second stage watemaik 248 in wavelet 
tnmafcirm coefficients that are deteimined to be "protected** accoidhig m the HVS 
model. In any case, the watennarkcd wavelet transform ooefTicientd 250 — which 

20 includes the firet stage wateimaiked wavelet transfonn cocffidcnt hits 244 and the 
second stage watcnnarked wavelet transfonn ooefiicient bits 240 — are EBCOT 
encoded by block 252 to derive a set of EBCOT codes 254 that have now been first 
stage watermarked end second stage watennariced. The first and second stage 
watennaiked EBCOT cndea 254 are thus protected from fraudulent manipulations 

25 because such manipulations can be detected by the authentication procedure 
illustrated in Fig< 3» as ia discussed below. 

Fig. 2B illustrates a variation of the wateimaridng aystem and 
procedure illustrated in Pig, 2A. The two procedures aic identical tip to the step of 
using the ECC codewords 248 as a watemiark. However^ in the aysion and procedure 

30 iltustratfld in Fig. 2B, the ECC-cncoded watemiark 248 ia received by the watermaik 
input 236 of a second stage wateraiailc storage block 258, and is stnred in the header 
of die act of watemiarked and non-watemiaiked wavelet transform coefficients 256, 
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set 156 inclucfiiig the first stage v^ftleimarkcd wavelet tRmsfoim ooeffioioit bits 244 
and the non-w^ennaiked wavelet transfonn coefGclem bits 220. Tbe resulting fizst 
and second stage watemtarked wavelet transfom) ooofficients 240 are EBCOT 
encoded by block 252 to denve a set of first and second xt^^ee waterrnarkcd EBCOT 
5 codes 254. Similar to the first and second stage watermarked HBCOT codes 254 
derived by the system and procedure of Fig. 2A. the first end second stage 
watermarked EBCOT codes 254 derived by the system and piocednrc of Fig. 2B are 
protected from unauthorized manipiulationB because such toanipulations can be 
detected by the authcnticatiofi aystem and procedura illiiatrated in Fig. 3. 

10 The authenticaiion system and procedure ilhistrated in Fig. 3 nscdves 

watofmaiked EBCOT codea 302 vrfiich purportedly — Le., if no fraudulent 
manipulatian has occurred are equal to or derived from first and second Stage 
wateimafced EBCOT codes 254 generated by one of the watEm:iiirkhig systems and 
piDccdurc3illQatraledinFigs. 2ABnd2B. For example* the EBCOT codes 302 in 

IS Fig. 3 includetbe following bit plane subbloclrs: bit plane snhblockBPSBi' which ia 
purportedly equal to or derived from bit plane subblock BFSBi;bjt plane subblock 
BPSB2' which is puiportodly eqnd to or derived from bit plane subbloek BFSBi ; and 
other bit plane sabblocks. In the andientication procedure illustrated in Fig. 3» feature 
codes 306 are newly derived by btock 304 from the watermaiked EBCOT codes 302 

20 in the same manner as is discuased above with respect to Fig3. 2A, 2B, 4, 1 2C, and 
13. For example, newly derived feature code F|' (derived fmrn bit plane subblock 
BPSBi') illustrated in Fig. 3 is puipottedly equal to feature code Fi illuairated in Pigs. 
2A and 2B; and newly derived fcsrtnre code Fa' (derived from bit plane subblock 
BPSB2') Illustrated in Fig. 3 is purportedly equal to feature code Fj illustrated in Figs. 

25 2 A and 2B. The feature codes 306 are preferably not derived from aU of the 

fractionalized hit pl?ines of thp. watcnnaikcd EBCOT codes 302. but only from bit 
planea more significant than respective subblock truncation points. Similarly to the 
watermarking systems and procedures illustrated in Figs, 2A and 2B —which define 
respective mincation points based on a selected wftermajkins bit rate 242 — the 

30 aothentication system and procedure illustrated in Fig. 3 definea its respective 
tnmcation pointa baaed on a selected aufhentioation bit rate 342. For both the 
waterniarking procedures and thA aiithenficatim pmcedures of Ihc present mvenlion, 
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the respective tnincarim points are defined in B» same manner fliat the JPEG2000 
oompressibn stuidani defines tnmcation points based on a selected compression Wt 
rate. As is discussed above, fbe derivation of optimal truncation points for respective 
subblocks basRd on a given bit late is well known to those sHUed in Ae art, as is 

5 evidenced by the ISO standards document for PEG2000: Information Technology-' 
JPFG2000 Image Coding System, ISOfmC biiernational Snmriaid 15444-1 (Dec. 
2000). The bit rate 342 used in the authentication procedure of Fig. 3 can be any rate 
less than or equal to the selected bit rate 242 used to watcnnaik the data 1 1 0 in the 
watcrmaTldng procedures iUuBtrated in Figs. 2A and 2B. The authentication bit rate 

10 342> which is the ratio of Ac number of untruncated bits used to derive die ftature 
codes 306 to the total number of bits in the set of EBCOT codes 302. can be used to 
indicate tibe authentication strength of the illustrated authentication procedure. 

The watcmuirked EBCOT codes 302 are decoded by an inveree 
EBCOT operation carried out by blodc 354 to derive a set of wavelet tianafi«m 

IS coefficients 356, A sd of first stage embedded wstennaiks 3 10 is extracted by blodr. 
308 fiom die wavelet transform coefficients 356 using the same bit rate 342 as is used 
to derive the feature codes 306. As is discussed abavc with neaped to the 
watermaddng systcrms and procedures ilhistrated in Figs. 2A and 2B, first stagp 
watermarks 214 are typically enibertded in the quantised wavelet tranaform 

20 coefficients 110 (shown in Figs. 1, 2A, and 2B) by replacing selected bits of selected, 
non-fractionalized bit planes of selected snbblocks of the coefficiOTits 110 with 
respective bits of the first stage waisermarlc 2 14 (shown in Figs. 2A and 2B). 
Thwcftnfj^ first stage embedded watemiarks 310 can be extracted by coUectine the 
same replacement bits and airanging the hits in their originaJ order to form dje 

25 wetermsffks 310. If the watermariced EBCOT codes 302 arc authoitic and have not 
been impmpcrly altered, the firet Stage watermartcB 310 extracted from me wavelet 
transform coefficients 356 should be identical to the first stage watermarisa 214 
(rfiown in Figs, 2A and 2B) that were embedded in the quantized wavelet Iranafenn 
coefficients 11 0 during the watKmaiking procedure — preferably one of the 

30 procedures lltasirated in Figs. 2A and 2B. Accordingly, each of the extracted 

watermarlw310 ia associated with apaiticular one of the newly derived feature codes 
306. bccsnsc if no fraudulent msnipulaiionB have occurred, each of the extracted 
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WHtennada 310 B Aiivttl fam end equal to 8 vwennark — 
wateimaikg 214 in the watennaikiiie system md procedure illustrated in Kg. 2A or 
Fie. 2B — that was originally derived fcom afcahvc code (one of the feeitgre codes 
204 in Figs. 2A and 2B) wWcih, as is discussed above, should be equal to a particular 
newly derived feotwe code (one of the fcanire codes 306 illustrated in Fig. 3). For 
example, wateimark Wi' is associated with feature code F|' because waleimark W,' 
(in Fig. 3) was puipoTtertly derived from watermark W, (in Figs. 2A and 2B) which 
was derived from feature code P, (in Figs, ?.A and 2B) which ehould be equal to 
fbatiuc code F,', as is discussed above. Similariy, watmnatk Wj' is associated with 
feature code P2' because watctmaik Wj' (m Fig. 3) was purportedly derived from 
watcnnaik Wi (in Figs. 2A and 2B) which was derived from feature code F2 (in Figs. 
2A and 2B) which should be equal to feature code as is discussed above. 

Therefeie, because each of the ojttactod first stage waermaika 310 (in 
Fig. 3) should be identical to a eonesponding otc of flie embedded first stage 
15 waiennaiks 214 (in Figs. 2A and 23), it should be possible, by reverting the first 
stage watermark generadon process, to temvor an ECC inessage code lh« other (a) 

equals the original feature code used to derive the Bmbedded first stage watsnnark, or 
(b) has corresponding PCBa that are ideBtical to the PCBs correqiflnding to the 
original feature code. For simplicity, and because the authentication gynem need not 
make any assumption regarding whether the exovted code in the original feature 
code or ameasage codehaviT<g the some PCBs as the original fisatnre codi^ the 
Kcovered code will be refttred to tet«in as simply a "message code." As Is discussed 
in fcrther detail hdow. the recovered meBsag* code can ttioi be compared to the 
newly derived ffeature code that is associated with the extrtwted waiemiaik, to 
25 deiemire whether Ihere is a Euccessfiil match. A msitch between fte recovered 
message code and the coiresponding newly derived rfeatuie code b considered to be 
successful If the recovered message code and the newly derived fisamre code have the 
same corresponding PCBs b the chosen ECC encoding jwhcme. 

To recover the rBq)ective message codes, the flist stage watermark 
geoeiaiion process is reversed as foltows. EaA of the extracted watermarks 310 is 
processed by an inverse quasi-random code geneiation pmceduie carried out by block 
338 having a scod output 346, to derive PCBs 340. If no unauthorized tnanipulationa 



20 
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Imt occwTcd, the ncwiy derived PCBg 340 should be identical to the PCBa 208 
(shown Id Figs. 2A and 2B) thatt were used to generate the watentiarks 214 in the 
quasi-tandan watermark Renefation block 212 of the watrrmarfcing systwn and 
procedure nf Rga. 2A and 2B. For example, FCB groijp PCB,' (in Fig. 3) fthould be 

5 identical to PCB group PCB| which wjw derived from bit plane gubblock BFSBi (in 
Figs. 2A and 2B); and PCB group PCBj* (in Kg. 3) ahonld be identical tn PCB gtoup 
PCBa which ww derived from bit plane aubblock BPSBi (in Figs. 2A and 2B). 

Bach groi^ of PCBs within the resulting set of PCBs 34C ifl then 
decoded by an error conection decoding (i.e., inverse ECC) procedure 34« to generate 

1 0 a message cafe. Each nicssagc code in the resulting set of message codes 3S0 has 
thus been derived fiom a group of PCBs whinh, as is discussed above, should be 
identical to the PCBs derived from a partieolar bit plane subblock of Ac EBCOT 
codes 1 1 8 (in Figs. 2A and 2B) that were aubjeoted to the watenmridng procedure. 
Pot example, message code MC| (in Fig. 3) is derived from PCB group PCBr On Fig. 

13 3) which should be identical to the PCB group PCBi (in Figs. 2A and 2B) that was 
derived fiom bit plane siibblock BPSBi (in Figs. 2A and 2B). Similarlyi message 
code MC2 fm Fig. 3) is derived fiom the PCB group PCBj' (in Fig. 3) which should be 
identical to the PCB groi^ PCB2 fm Figa- 2A and 2B) Oiat was derived fiom bit plane 
subblock BPSBi (in Figi 2A and 2B). Because two or more different message codas 

20 can be associated with (i^e., can be ECC encoded to derive) the 5?»mc gmup of PCBs 
as is apparent in the exemplary ECC encoding scheme illustrated in Pig. 15, 
discussed above — message codes MCi, MCj^ etc are not necessarily identical to the 
nspcctive newly derived feature codes Fr, fi\ etc. However, as is discussed nbovp., 
each message code should be cithw equal to its corresponding newly d»ived feature 

25 code, or matched to the same group of PCBs in the chosen BCC encoding scheme. 
For example, referring to the exemplary scheme iUustrttcd in Fig- 15, if newly 
derived feature code Pi' equab 01 10 ^hich coiresponds to (Le., is associated with) 
a PCB group having a value of 0 1 1 — then If no improper manipulations have 
occurred, MCi should equal either 0110 or 1000, beeause each of these two message 

30 code values corresponds to a PCB group having a value of 01 1 • 

The newly derived feanue codes 306 arc thcrofore compared on a 
subblock-by-aubblock basia to the eonesponding message codes 350 derived from the 
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artnct)edwatefmarkB310(Btep312). For each feature code and. mesflafie code being . 
compared, the cnmparisoQ ptocednre 312 deieimines whether the PCBs associatErt 
with the massage code equal the FCBs associated with the feature code. Hie 
oomparieon piooeduie 312 preferably also Includes conventioiial ECC crmr correction 
5 block 352 to correct «piiriouaeiTOr3. If any of the blocks h$fi one or more newly 
derived feature codes which feil to compare properly to the corresponding mes^ge 
codes (block 3 16), ttie compariflon procedure carried out by Viodc 312 identifies the 
ftiled blocks 320. On the other hand, if all of tl^ blocks pass {Jblovk 314), the 
comparison procedure 312 derives ECC oodewDids 3lS^hjvcd on Ac newly derived 

10 feature codes 306 — each codeword including a newly derived feature code and a set 
of PCBs derived from that feature code — and the ECC codewords 318 ere hashed in 
block 322 to derive a digest 324. Par ex^g^ple, a codewordF/ + PCBi" is ibnncd by 
concatenating feature cpde Fi' with a set PCBi" of PCBs derived firom the feature 
codeFr, Simflarly.ecodcwonlFa'+PCBiirisfimnedbyconcatcnactingfea^ 

15 Fa' with a set PCB2" of FCBs derived ftom the feature code FjV 

In addition, a set of ECC codewords 358 is extracted by block 330 
fiom the wavdei ttanefenn coeCEcients 356 that were derived ftom the EBCOT codes 
302 by block 354, discussed above. If the second stage watmnaris were jniipDitGdly 
onbedded — usinB die second stage watomedc embedding by block 238 iUustmed in 

20 Fig. 2A — in the waiennarked wavelet nansform coefficients 250 from which the 
EBCOT codes 302 were derived, and block 238 embedded the second stage 
watermari: biu by simply replacing Rclcctod bits of the wavelet trandferm coeCBcients 
according to a random or quasi-fandom pattern, ^ is discussed above with respect in 
Fig. 2A, then the jwcond stage watermaric extraction procedure 330 illustrated in Fig. 

2S 3 derives ECC codewords 358 by locating the crnheddod bits within the newly 
derived wavelet transform coefficients 356 and arrangmg ihe bits in their original 
order based nn the aforementioned random or quasi-random pattern. On the other 
hand, if the second stage watermarks were purportedly sinrcd — using the second 
stage watermark storage by block 2S8 illustrated in Fig. 2B — in the header of the 

30 wavelet tnuvrfhrm oocfficicnls 240 fiom which the EBCOT codes 302 were derived, 
then the second stag^ wateimark extraction by block 330 illustrated in Fig. 3 derives 
ECC codewords 35S by collecting them ftom the header of the set of newly derived 



PA(£29IS0'RCVDAT2l1l200n0:47:48AM[East^ 



02/01/2007 10:58 FAX 212 355 3333 



600DVIN PROCTER LLP 



PCTmSA2/dJ48S 



@030/060 



wavelet transfoim coefiicieirtB 356, It is to be noted tibat the set of wavelet transform 
coefficients fiom wfaidh the sieeond Stage watmnuk is to be extraeted is typicaUy 
detexmined by the same bit rflie 347. used in pcrfbim 4e feature code derivation by 
bbck 304 and the first st^e watermark extraction by btock 308. If there has hocn no 

5 unauthorized manipulation/mocfification of the data, the extracted ECC codewords 
358 should be identical to the ECC encoded watennarlc 248 (shown in Figs. 2 A and 
2B) used to watennark the data in the watennarking fiystra and procedure (preferably 
one of the systems and procedures illostratcd in Fig?. 2A and 2B). 

Tlie extracted BCC codewords 358 aie decoded using an error 

10 correcttcm decoding (i.e. inverse BCC) procedure 360 to derive a decoded second 
fitase watennark 332. If thm hju^ been no fraudulCTt manipulatioxiftnodiflcalion of 
the data, the decoded second stage watennark 332 should be identical to the global 
signature 234 cinbcddcjd Jn the data in the vratennarking Bystem and procedure 
iUustnstted in Fig, 2A or Fig. 2B. The decoded second stage wfttennaik 332 — which 

15 is a signature exhracted fiom the wavelet transform coefficients 356 derived from the 
watermarked EBC(3T codes 3 02 — is decrypted by block 334 usixiR a PKI public key 
344 which conresponds to the private key 232 used to encrypt die digest by block 228 
in the watcrtnarking systsni and procedure illustrated in Fig. 2 A or Fig. ZB. The 
decrypted signature 336 is then compared to the newly derived digest 324 on a bit-by- 

20 bit baaia by block 326 to derive an anthentication lesult 3ZR, The aathentioetion result 
32 8 indicates whether the watermarked EBCOT codes 302 have been fraudulently 
manipulated* 

It wiU be appreciated by those skilled hi the art that the systems and 
procedures ilhistratcd in Figs. U2A,2B,3-5. 11. 12A-C, 13, 15, and 16 maybe 

25 implemented on various gtandard computer platforms havmg the requisite computing 
power and operating under the control of suitable software, the design nf which 
soltwarc will be apparent to such skilled artiaans from the description contained 
herein. In some cases, at least portions of the system* and procedures described 
herein may be implemented using dedicated special purpose hardware. 

30 Figs. 9 and 10 illustrate typical computer hardware suitable fcr 

perfcnning the methods of the present invendon. Referring lo Fig. 9, the computer 
system includes a processing section 9l0, a display 920, a keyboard 930, and a 
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communicatioo^ peripheral device 940 such as a modem. The syatem typically 
includes a digibl pointer 990 (e.g., a "mouw") and can also include other input 
devices such as an optical scarmcr 950 for scanning ttiiixuigc medium In 
nddition, the system can include a printer 960. The computer system typically 
5 includes a haii disk drive 980 and one or more additional didc drives 970 which can 
read and write to computer readable media such as magnetic media (e.g., diskettes or 
removable hard disks), or optical media (e.g., CD-ROMS or DDS), The disk drives 
970 and 980 arc used for storing data. Operation system software, and application 
software. 

) 0 Fig. 1 0 is a functional block diagram which fUilher illustrates the 

processing sectinn 910. The processing section 910 g^ierally mcludes a processing 
unit 1010, control logic 1020, and a memory unit 1030. Preferably, the processing 
section 910 also tneludes a timer lOSO and input/outpm ports 1040. The processing 
section 910 can also include a co^piocessor 1 060. depending on (he mioroprocessor 

15 used m the processing uniL Control logic lOWprovides, in conjunction vi^jth 
piDccssing imit lOlO, ftc control necessary to handle communications between 
memory unit 1030 and input/Dntput pmts 1040. Timer 1050 provides a timing 
r^feimce signal For processing unit 1010 and control logic 1020. Cn-prncessor 1060 
pjnvidcs an enhanced ability to perform complex computations in real time, such as 

20 those required by cryptographic algorithTtiR. 

Memoiy unit 1 030 can include different types of memory, such as 
volatile and non-vniatilc memory and read-only and programmable memory. For 
eT^ample, as shown in Fig. 10, memory unit 1030 can mclude resd-tmly memory 
(ROM) 1031, electrically erasable proeranunablenjad^onlymemory^ 

25 1032, and randum-acccxR memory (RAM) 1033. Different computer processors, 

memoiy configurations, data structures and the like can he used to practice the present 
invention, and the invention is not limited to a specific platform. For exanqile, 
although Ae processing section 91 0 ts ijhutrated in Figs. 9 and 10 as part of a 
computer system, the processing section 910 and/or its components can be 

30 incDiporated into an imager such as a digital video camera or a digital still-Image 
camera. 
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Software defined by die description herein may be written in a wide 
variety of prosrammine languages, as will be ^preciated by those ridUed in the art. 

Altbou^ the present invention has been described in connection with 
specific exemplary embodiments. It should be undo^od that various change. 
5 subsstitutions, and aJtcrationa can be made to the disclosed embodiments without 
depaiting fiom the spirit and scope nf the invcnticm, the scope being set forth in the 
appended claims. 
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WE CLAIM: 

1 . A meAod for watcmiaridng data, comprising «teps o£ 
deriving at least one fcaiurc code finm a first set of data; 
deriving at least on© parity chock bit from the at least one feature code; 
5 including the at least cmc parity check bit in at least one codeword; 

pwccaaing Hie at least one codeword by a firjrt hash operation for 
deriving a fast hash resuH; and 

usmg a first code to sign the first hash result for deriving eignanm 

data. 

10 2. AniBfliodaccnniingtoclaiTn 1, wherein the at least one codewmd 

fiirther includes the at least one feature code. 

3. A method according to claim 1, fblther comprising: 

processing a second srt of data by a domain transfcrmalion pracednTB 
far delving a set of tianfifomi^omam data; 
15 qufliilizing the set of tranaform-doniain data &r deriving a act of 

quantised data having a fim mnnbcr of quantization levels; and 

encoding Oe set of qoanUzed daia by a bit plane fractionalization 
procedure for deriving the first set of data, the tot set of data having a second 
number of quantiaatlon levels, the second number of quantization levels being greater 
20 dian die fint number of quantizatioA levels. 

4. A method aocoiding to claim 3, wherein the domain transfoimation 
piocedure comprises a wavslei transform, the set of transform-domain data 
comprising a set of wavelet mnsfonn coelBcients. 

5. A method according rn claim 1 , further oomi^sing the steps of: 

25 using the at least one parity check bit as a seed of a quaBi-random code 

generation procedure for deriving watemiark data; 

embedding the watcraiark data in selected bit positions of a truncated 
portion of the first set of data for deriving a first set of wateimarked data; 

deriving a set of non-watemaarted data corresponding to the first set of 

30 wateimarked data; and 

deriving a second set of watermarked data by at least one of: (a) 
embedding data derived fiom the signature data in die set of non-wrtermarkod data* 
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* and (b) concatenaxing the data dcrivrf from the signature data with a data set that 
includes both the fiist set of watermaiked dau and the set of non-watennaikcd data. 

6. A method according to o Wm 5. fiuftcr corapriaing: 

piocesdng a seoond set of data by a domain transfimnation procedure 
5 for deriving a set of transfonn-domain data; 

quantizing thf? set of transibnn-doinain data for deriving a set of 
quantized data having a first number of quanilzadon levels; and 

encoding the set of qudnti^ data by a bit plane fractionalization 
procedure for deriving the firet set of data, the first set of data having a aecond 
10 number of quantization levels, the second number of quantization levek being greater 
than the Hr^ number of quantization Icvcb. 

7. A method according to clahn 6, wherein the at least one codeword 
further includes the at least one fiaature code. 

8. A method according to claim 6, wherein the domain tran&fbnnation 
1 S procedure comprises a wavelet transfonn, the set of inuufbrm-domain data 

compriaing a set of wavelet transform ooefQcients. 

9. A method aocoiding to claim 5, n^ierein the at least one oodewocd 
ibifher includes the al least one fhaiura code. 

to. A method for authentioating a set of watermaited data derived ftom 
20 the second set of watamaiked data of claim 5, the method comprising the steps of: 
deriving a set of feature codes flom the set of watennaiVBd data; 
extracting a set of watcrmaric codes from data derived from the set of 
walemiarked data, each of the wateraiark codes being assodatesrt wift a respective 
rme of the feature codes derived from the set of wateimariced data; 
23 performing a first srf of authentication Steps on each Of the feature 

codes derived firom the set of watemiarked data and nn a watermark code associated 
with the each of the feature codes derived from the set of waieimaiiced data, the first 
set of authentication steps comprising: 

using an inverse qua$i-random code generation procedure to 
30 derive a respective act of at least one parity check bit from the watennaik code 
associated with the each of the fesiure cndes derived from the set of watemiarked 
data, * 
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error conation dccodnig icspective set of at least one 
psdty check bit for deriving a respective meeeafie code^ the tespecitve message code 
having associated therewith a fint coircspojiding set of at least one parity check bit. 
each of the feature codes derived itcan the set of watermazked dau having associated 
5 therewith a second corresprnding set of at least one parity check tnt, and 

dcttmiiiung whether the fiirrt cnrrBponding set of at least one 
parity check bit equals the second corresponding sec of ar least one parity check bit; 
and 

if the first 5Ct of authentication steps being performed on every one of 
10 the feature codes derived from the set ofwateimarked data and on the watermark code 
aasociated with the every one of the feature codes determines that the first 
corre^onding set of at lea^ one parity check bit equals the second corresponding set 
of at least one parity check bit, perfbiming; a second set of authenticatioa stepa 
compnains: 

15 deriving a set of codewords having at least a respective one of 

the feature codes derived from the set of watomarked datBi each codeword of the set 
of codewords finther induding a ad of at Icest one parity check bit correspondixxg to 
the respective one of the feature codes included in die codeword, 

pioeeasmg the set of codewords by a second hash operatioa for 
20 HeriviT^ a Mfiond hash ifiMilt, 

extracting a second set of signature data from the data derived 
from the set of watermariced data, 

using a second key code to decrypt the second set of signature 
data fbr deriving decrypted dgnature data, the second key code comprisine a public 
25 key code, thefts key code comprising a private key code» the public and private k^ 
codes fbnning a PKI key pair, and 

comparing the second hash result with the decrypted signature 
data for deriving an aufhentieation result 

11. A method fbr deriving Image-domain data from the set of waiermariced 
30 data of clahQ 10, the meftod comprising the steps of: 

decoding the set of watermarked data by en invctse hit plane 
fiactionalization procedure fiir deriving a set of quaritized trans&rm-domain data^ die 
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set of watmnaiked data having a fint number of quantization leveb, the set of 
qiia7ifi74»l tnuisfomi-doniain data havmg a seccrnd Tiuraber of quanti/^ticm levels, the 
first numbCT of qunnttzation levals being greater than the second number of 
quantization levels; and 
5 processing the set of quantized tran&fbrmHlomau] data by an inverse 

domain transfoimation for denying the image-domain data. 

1 2> A method zsccording to claim 1 1 , wherein (he net of quantized* 
transfonn-domain data comprises a set of wavelet transfomi coefficients, and the 
inverse domain transfonnation procedure eomprisea an inverse wavelet tranaforai. 

10 13. A method for authenticating data, comprising the steps of: 

using an aufhenticadon bit rate equal to a ratio of a first data set size 
and a second data set size to detennine respective bit plane tnmcation points defmmg 
respective hit plane sabblnrJt:5 of a data set, the data set having the first data set size 
and Ae bit plane aubblocks of the data set having the second data eat da^ 

15 deriving feature codes bom the respective bit plane aubblocks of the 

data set; and 

comparing the feature codes to corresponding message codes for 
doiving a first audicntication result, the message codes being derived fiom watermark 
codes extracted from transfonn-domain dau derived torn the bit plane subblocks of 
20 the data set. 

14. A method according to claim 13, further comprising, if the first 
authentication result indicates that the data set is authentic, the steps of. 

deriving a respective codeword from each one of the feature codes, the 
mpectfVe rodewoid comprising the fcattJrc code from which the Rsspcctivc codcwtird 
25 Is derived and at least one parity check bit derived from the feature code; 

processing the codewords by a hash operation for deriving a hash 

result; 

extracting error correction encoded data fiom the transfonn-domain 

datdi 

30 error coircction decoding the error correction encoded data Tor 

deriving signature data; 

using a key code to decrypt the signature data for deriving decrypted 
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signature data; and 

comparing the ha$b wwlt to the decrypted signature data fer deriving a 

second avtfaendoation result. 

13. A metlwKl for deriving imBge-domain data from the data set of claim 
5 14, the method comprising the stqss of: 

decoding the data set by an invei$e bit plane fractiaiwKzation 
procedure Ibr derivmg a set of quantized tnmsfonn-domain data, die data Kt having a 
first number of quantization levels, the set of quanti/isd transform-domain data having 
a second number of quantization levels, the first mmiber of quantization Icvcla being 
1 0 greater than the second number nf quonti^ation levela; and 

procesBinB the set of quantized transftirm-domain data by an inverae 
domain transftirmation for deriving the image-domain data. 

16. A method according to claim 15, wherein the set of quantized 
tranafeim-domain data comprises wavelet transfbrm coefficients, and die inverse 

15 daniflintransfemiationcoinpriaea an inverte wavelet txansform* 

17. AmelhOd ihr deriving image-domain data from the data set of claim 
1 3, the method comprising the steps ofi 

d ocodtng the data aet by an inverse bit plane firactionaKzation 
procedure for deriving a set of quantized traiwfiOTm-domain data, the data set having a 
20 first number of quantization levels, the set of quantized tnmsfoim-domain data having 
a second number of quanfirMi'on levels, the ftat number of quantization levels being 
greater than flie second number of quantization levels; and 

pmceaaing the set of quantized transform-domain data by an inverse 
domani transformation for deriving the iniage-domain data. 
7 5 18, A method according to claim 1 7, wherein the set of quantized 

transfbrm-domain data comprises wavelet transfomi coefficients, and the inverse 
domain transtoimation comprises an inverse wavelet transform. 
1 9. An apparatus for watermarking data, coimprising: 

A fitRt processor for deriving at least on^ feature code ftom a first set of 

30 data; 

a aecond processor for deriving at least one parity rhcck bit fifom the at 
least one feature code; 
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R third piocoesor fbr includbg the at 1fta.«*t one parity check bit in at 

least one codcwnrd; 

& fburth procMSDT for ha&hing the at leaat one codeword for detivins a 

first hash result; and 

5 a fifth procc»or for using a first key code to Sign the first hash result 

for deriving signature data. 

20. An apparatus aocordlng to claim 19, wherein the at least one codeword 

tbrfh«r includes the at les»t one {eature code, 

2 L An apparatus according to claim 1 9» further comprising' 
10 a sixth processor for domain iransfoiming a second set of data for 

deriving a set of transftirTn-dnniam data; 

a seventh processor ftr quantizing the act of transfeim-domain data fcr 
deriving set of quantized data having a first number of quantizafioa levels; and 

an eighth processoT for encoding the aet of quantiaed data by bit plane 
15 frartionahzation fcr deriving flie first set of data, die first set of data having * 

number of quantization levels, the second number of quantization levels bring greater 
than the first number of quantization levels, 

22. An apparatas according to claim 21, wherein the sixth processor 
comprises a wavdet transform processor, the set of transformed-domain data 

20 comprising a sot of wwclct transform cocffictcnta* 

23. An apparatus scconlinR to claim 19, flinher compiising: 

a sixth pTDccsjrar responsive to the at least one parity check bit as a 
seed for quasi-mndDm code generation to derive watermark data; 

a seventh processor &r embeddfaig the watermark data in selected bit 
25 positloOT of a truncated portion of (he first set of data for derivinR a first set of 

watermarked data; 

deriving a set of non-watermarked data correspondmg to the ftrst set of 

watermarked data; and 

an eighth ptocewor for deriving a second set of watcnnarked data by at 
30 least one nf: (a) embedding data derived from the signaiure daia in the set of non- 
watemiBriced data, and (b) cDocateiuiting the data derived from the ei^iature data widi 



PAGE 38f60'RCVDAT2f11200710:47:48AM (Eastern 



02/01/2007 11:01 FAX 212 355 3333 
WO 03/090941 



GOODWIN PROCTER LLP 



g|033/060 

PCT/US02/31488 



a data set that induHca both tha firel set of waiennaiked data and iho set of non- 

watermariceddat^ 

24. An apparatus according to claim 23. fiitthcr oonq>ri9ing: 

a ninth proccaeor for domain tran»ft)rming a second set of data for 
5 deriving a set of tranB&nn-doniam data; 

a tenth pfocesfior for quantizing the set of troisfonn-domain data for 
deriving a sei of cpiantizird data having a firtrt number of quantiaation levels; and 
cm eleventh processor for encoding the set of quantized data by bit 
plane fractionsdization for deriving the first set of data, ihc first act of dato having a 
10 second number of quantiy^ion levels, the second number of quantization levels being 
greater *an the first number of quantization levels. 

25. An apparatus accontng to claim 24, wherein the at least one codeword 
further includes the at least one fisatonc code. 

26. An ««»paratu8 according » claim 24, wheicm the ninth processor 
15 comprises a wavelet transform processor, and the set of trans&imr^^ 

comprises a set of wavelet transfbim eoeflSeients. 

27. An «)p"B*«« accoiding to claim 23, wberein the at least one codewoid 
fluther inchides die at least one feature code. 

28. An apparatus fcr anthentiqatirig a set of walermarkfid data derived from 
20 the second set of watemiflriced data of daun 23, die apparatus comprising: 

a firet protcMor for deriving a set of feature codes ftom the f«t of 

watermarked data; 

a second piocessor for extracting a set of watermark codes from data 
darived ftom the set of watemiarkcd data, each of the watermaric codes bdng 
25 associated with a respeotivo one of ihe feature codes derived from the set of 

watermarked data; 

a third pt^scessor for authenticating each of Oie feature codes derived 
from the set of watemiariced data, the third processor further fcr authenticating a 
watermark code associated with flie each Of the feanire codes derived ftnm the act of 
30 watemiarked data, the third proccssnr comprising, for each one of the fcawre codes 
derived from the set of watennarked data; 

a fourth processor for inverse quasi-random code generation to 
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derive a lespective set of at least one parity chocV bit from fhc watermark code 
OfisocLBted with (he each of the feature codes donved ftom the set of watennaiked 
data. 

a 6fth processor for error correction decoding the respective set 
5 of at least one parity check bit for deriving a respective message code, the respective 
message code having assnp^ted therewith a first corresponding set of at least one 
parity check bit, each one of the feature codes derived finm the set of walcmiBflced 
data having associated therewith a second corresponding set of at least one parity 
check bit, and 

10 a sixth processor fbr detemuning whether the first 

conesponding set of at least one parity check bit equals the second ooiiespondmg set 
of at least one parity check bit; and 

a seventh processor responsive to the rixih processor 
dotonrnning that the first oorrcspODding aet of at leaal one parity check bit equals the 

IS second corresponding set of at least one parity bit for ev«ry one of the feature codea 
derived from (he set of watermailced data and fbr die watennaik code associated with 
the every one of the feature codes, fbr deiivii^; a set of codewonb by inoluding in 
each one of the oodewords: 1) at least a respective one of the feature cndis derived 
fiom the aet of watennorked data, and 2) at least the parity cheek bit derived fiom the 

20 respective oue of the feiitiiT« codes, 

an eighth processor responsive to the seventh pmccssnr 
deriving a set of codev/ords for hashing the set of codewords for deriving a second 
hash result, 

a ninth processor for responsive to the ei^th processor 
25 deriving a hash result for extncU'ng a second set of aignature data from the data 
d^ved from the set of watermarked data, 

a tenth processor responsive to the ninth processor extracting 
signature data for using a second key code to decrypt the second set of signature data 
fbr deriving det^ted signature data, the second key cnde mmprismg a public key 
30 code, the first key code comprising a private key code, the public and private key 
cadc« fhrming a FKI key pair, and 

an eleventh processor re.<q>oiisive tn the tenth processor deriving 
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dociypted Bignature data fbr comparing the second hash mull wftb Oie^lcciypted 
signature data for deriving an tfadienticalion rewlt 

29. An qipanrtus for deriving image-domain datn ftum the set of 
watennarked data of claim 28» comprising: 

5 a firat processor ftr decoding the set of watennoriced data by inverse 

bit plane fiactiGnalization for deriving a set of quantized transfcrm-dDmain data, the 
set of watermarked data having a fbrt number of quantization levels, ibe set of 
quantized transform-domain deta having a second number of quantizaUon lovela, ihe 
first number of quantiration levels being neater than the second number of 

10 quantization levels; and 

a second processor fbr inverse domain transforming the set of 
quantized transfcnn-dDmain data for deriving the image-domain daia. 

30. An apparatus according to claim 29. wherrfn*B set of quantized 

infflsfonn-domain data comprisea a set of wavelet transform coefficients, and the 
1 S second processor comprises an mvciae wavelet tranaform processor. 

31. An apparatus fbr authendcating data, comprising: 

a first pxoeessor fcr uaing an authentication bit rate equal to a ratio of a 

first data set size and a second data set site to determine respective bit plane 

tnincatioii points defining respective bit plane subhlcidca of a data set, the data set 

20 having the first data at size and the bit plane subblocks of (he data sot having the 

second data set size; 

a second processor for deriving ftamre nodes from 4c respective bit 

plane subblocka of die data set; and 

a third processor for compaiing the fcsahire codas to conrcsponding 
25 message codes for deriving a first authentication result, die message codes being 
derived ftom the watermark codes extracted from trwifiform-domain data derived 
fiom the bit plane subblocks of the data seL 

32. An apparatus according to claim 3 1 , further campri5Jng: 

a fourth piDc«$M>r for deriving, if die first authentication result 
30 indicates that the data set is authentic, a respective codeword fiom each one of the 
future codes, the respective codeword comprising the feature code from which the 
respective codeword ia derived and at least one parity check bit derived fopm the 
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featui^ code; 

a fifth processor for hashing the codewonb for deriving a hash result; 
an sixth pwceesor for extracting eiror collection encoded dote ficm the 

transfisnn-damain data; 
5 a seventh proeessor for error correcstion deooding the ener coirection 

modcad data for deriving signature data; 

an eighth processor for using a key code to decrypt the signature data 
for deriving decrypted signature data; and 

a ninth prooessor ftr comparing the hash rcsuk to the decrypted 
10 sigtiature data for deriving a second outh^tication recult 

33, An apparatus for deriving inugi&<lnmain data from the data set of 

daim 32. comprising: 

a first processor for deoKfing the data set by inverse bit plane 

fractionali^ation fw deriving a set of quaniiaed transform-domain data, the date set 
15 havrng a first number of quantization levels, the set of quanii2©d tcans&nn-doiiiain 

data having a second number of quantization Icrcla, the first numbwof quantizatioa 

levels being greater Ihan the aec(md number of qusntizaticm levels; and 

a second processor for inverse domain tranafbrming the set of 

quanti2sd transform-domain data for derivmg the image^omsin data. 
20 34. An apparatus according to claim 33, wherein the set of quantized 

transform-domain data comprises >iyavelet transfcnn coefficients, and the second 

processor conaprises an taverse wavelet transfbrm processor. 

35. An ipp™t>" fo^ deriving bnage-domain data 6om the data set of 

claim 3U comprising: 
75 a first processor for decoding the data set by inverse bit plane 

fractioncdirMi'on for deriving a set of quantized transforai-domain im, the data set 

having a flrst number of quanrization levels, the set of quantized transfbrm-domain 

data having a wond number of quantization levels, the first mimher of quantization 

levels hcing greater than the second number of quantization levds; and 
30 a second processor fcir inverse domain tranaforming the set of 

quantized transfonn-domain data Ibr deriving the imagerdomaiii data. 
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36. An Qppantus aocoiding to claim 35, wiieiein the se^ of quantized 
traDsftmn-HcimMii data compriMS wavdel transfbim coefficicntSi and the second 
processor comprises an Inverse wavcid tnnsfi>im processor* 
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